Terra Classic
$40.00B
The biggest Web3 and DeFi exploits ranked by amount lost. Track high-impact incidents, study attack patterns, and learn how security failures scale into multi-million dollar losses.
$101B+
Total Value Lost
3299
Incidents Tracked
74
Chains Affected
80
$100M+ Incidents
$40.00B
$5.50B
$3.60B
$3.50B
$3.36B
$2.90B
$2.80B
$2.00B
$2.00B
$1.50B
Showing 1551–1600 of 3299 ranked incidents
| Rank | Project | Amount Lost | Date | Chain | Technique | Attack Guide | Source |
|---|---|---|---|---|---|---|---|
| 1551 | GDAO | $90K | - | Rugpull | — | View → | |
| 1552 | CryptoBatz | $90K | - | Other | — | View → | |
| 1553 | Squid | $90K | - | Other | — | View → | |
| 1554 | Berally | $90K | berachain | Private Key Compromised (Unknown Method) / Access Control | Access Control Attacks | View → | |
| 1555 | StepHeroNFTs | $90K | - | Reentrancy | Reentrancy | View → | |
| 1556 | Rodeo | $90K | arbitrum | Mint Reserves Logic Exploit | — | View → | |
| 1557 | Cashera | $90K | - | Rugpull | — | View → | |
| 1558 | Klein Bottle | $90K | - | Rugpull | — | — | |
| 1559 | Brahma Finance | $90K | - | Other | — | View → | |
| 1560 | Builders NFT | $89K | - | Rugpull | — | View → | |
| 1561 | Towelie | $89K | - | Rugpull | — | View → | |
| 1562 | Ninja Gaiden | $89K | - | Rugpull | — | View → | |
| 1563 | AI DAY: Part 2 | $89K | - | Rugpull | — | — | |
| 1564 | NFDAO | $88K | - | Rugpull | — | View → | |
| 1565 | DerpMan | $88K | - | Rugpull | — | View → | |
| 1566 | Tailverse | $88K | - | Other | — | View → | |
| 1567 | China Rabbit | $88K | - | Rugpull | — | View → | |
| 1568 | iSharesBitcoin | $88K | - | Rugpull | — | View → | |
| 1569 | Expanso | $88K | - | Rugpull | — | View → | |
| 1570 | BYToken | $87K | - | Flash Loan Attack | Flash Loans Attacks | View → | |
| 1571 | Move token | $87K | - | Rugpull | — | View → | |
| 1572 | Bitcoinica | $87K | - | Other | — | View → | |
| 1573 | BTC24H | $86K | polygon | Acces Control Exploit / Access Control | Access Control Attacks | View → | |
| 1574 | Novo | $86K | - | Oracle Issue | Oracle Manipulation & Price Manipulation | View → | |
| 1575 | NFT Cloud | $85K | - | Other | — | View → | |
| 1576 | MoneyMon | $85K | - | Other | — | View → | |
| 1577 | Animoca Brands Metaverse | $85K | - | Rugpull | — | View → | |
| 1578 | Galaxy Coin | $85K | - | Rugpull | — | View → | |
| 1579 | HypurrFi | $84K | - | Other | — | View → | |
| 1580 | Raptor2 | $84K | - | Rugpull | — | View → | |
| 1581 | CBDAO | $84K | ethereum | Rugpull | — | View → | |
| 1582 | AssetClub | $84K | - | Rugpull | — | View → | |
| 1583 | 2049 | $82K | - | Rugpull | — | View → | |
| 1584 | TITANX | $82K | - | Rugpull | — | View → | |
| 1585 | NeedForSpeed Finance | $82K | ethereum | Rugpull | — | View → | |
| 1586 | ChainGPT | $82K | - | Rugpull | — | View → | |
| 1587 | Finance | $81K | - | Rugpull | — | View → | |
| 1588 | CoinPanda_ETH | $81K | - | Rugpull | — | View → | |
| 1589 | MEMEPAD | $80K | - | Rugpull | — | View → | |
| 1590 | OracleBNB | $80K | - | Rugpull | — | View → | |
| 1591 | YAYO | $80K | - | Rugpull | — | View → | |
| 1592 | Roe Finance | $80K | ethereum, polygon | Flashloan Pool Shares Exploit / Oracle Issue | Flash Loans Attacks | View → | |
| 1593 | Rubic | $80K | - | Access Control | Access Control Attacks | View → | |
| 1594 | BABYFIDO | $79K | - | Rugpull | — | View → | |
| 1595 | DKP Token | $79K | - | Other | — | View → | |
| 1596 | Memecoin | $79K | - | Rugpull | — | View → | |
| 1597 | Cupid | $79K | - | Flash Loan Attack | Flash Loans Attacks | — | |
| 1598 | Pirate x Pirate | $78K | - | Access Control | Access Control Attacks | View → | |
| 1599 | OracleSwapToken | $77K | ethereum | Honeypot | — | — | |
| 1600 | Zodiac Credit | $77K | - | Rugpull | — | View → |
Data sourced from DefiLlama & SunWeb3Sec/DeFiHackLabs . Thank you for keeping Web3 security data open.
The most expensive crypto hacks are not random. They cluster around repeating vulnerability patterns: access-control failures, flash-loan manipulation, oracle abuse, and unsafe external calls. Studying large-loss incidents helps security researchers prioritize high-impact threat models first.
For deeper context, explore the full Web3 Hacks Dashboard and our Smart Contract Attack Library for hands-on exploit and mitigation breakdowns.
Incidents are ranked by parsed USD amount lost in descending order. Records without parseable loss values are excluded from this ranking.
It includes all incidents with known loss values in the database. Use the full dashboard for broader filtering and lower-severity incidents.
Study attack-class pages first, then practice in guided exercises inside the Smart Contract Hacking course.
$101B+ lost to preventable vulnerabilities. Master real exploit patterns and defense techniques with hands-on Web3 security training.